https://vanirrr.tech/tags/soc/Recent content in SOC on vanir's blogHugoen-usTue, 23 Jun 2026 21:56:02 +0100https://vanirrr.tech/notes/honeypot/Tue, 23 Jun 2026 21:56:02 +0100https://vanirrr.tech/notes/honeypot/<h1 id="honeypot-using-cowrie-and-elk-stack">Honeypot using Cowrie and ELK stack</h1> <p>After acquiring a vm from azure&rsquo;s student plan, I wanted to put it to good use, so I decide to build a small honeypot using Cowrie and ELK to sharpen my SOC and analysis skills. and also to troll.</p> <p><img alt="interface" loading="lazy" src="https://vanirrr.tech/images/interface.png"></p> <hr> <h2 id="whats-a-honeypot">What&rsquo;s a Honeypot?</h2> <p>A honeypot is a decoy system designed to look like a real target. It doesn&rsquo;t serve any real purpose , it exists purely to attract attackers, log everything they do, and help you understand how they operate.</p>